Ruijie Indonesia RG-S2600G-I Series

Flexible and Complete Security Control Policy

• Adopting multiple internal security mechanisms to effectively avoid and control the spread of viruses and attacks within the network. In this way, the switch can prevent illegal users from using the network, ensuring rational use of the network by authorized users. Such mechanisms include port static and dynamic security binding, port isolation, various hardware ACL controls, bandwidth rate limiting based on data flow, and storing a variety of information in user access control. In this way, the switch meets the requirements of corporate and campus networks to strengthen controls on visitors and restrictions on unauthorized user communication.
• Isolate user communication information from each other by setting ports to protected ports to ensure information security without using VLAN resources
• Effectively curb ARP gateway spoofing and host ARP spoofing which is increasingly rampant on the network by adopting a dedicated hardware-based anti-ARP spoofing function and ensuring normal network access
• DHCP only from trusted ports by making use of the DHCP snooping feature to prevent unauthorized settings from the DHCP Server from interfering with IP address allocation and management and affecting normal network usage. Further, supported by strong DHCP snooping, the RG-S2600G-I series switch can effectively prevent ARP host spoofing and source IP address spoofing in cases where DHCP provides dynamic IP address assignment by dynamically monitoring ARP and checking source IP address.
• Web and Telent access control based on the source IP address prevents ilega hackers and controls the device to strengthen device security.
• Encrypting management information in Telnet and SNMP processes using Secure Shell (SSH) and SNMPv3 ensures the security of management information and prevents hackers from launching attacks and controlling devices and protects the network from intrusion and sniffing.
• With multiple built-in security connections including statistical and dynamic port binding, port isolation, various types of hardware ACLs (e.g. expert-level ACLs, time-based ACLs), changing bandwidth rates based on traffic, and multi-element user binding. Secure access control, RG-S2600G-I series switch prevents the spread of viruses and network traffic attacks and controls unauthorized network usage.

High Reliability

• The Network Foundation Protection Policy (NFPP) classifies packets (management, forwarding, and protocol), limits their rates, and monitors their attacks to support dual protection of the CPU and funnel bandwidth against attacks. In this way, the switch can ensure packet forwarding and normal protocol status, maintaining network stability.
• The 802.1D, 802.1w, and 802.1s spanning tree protocols support fast convergence, improve error-avoiding capabilities, and ensure normal network operation and link load balancing that properly utilize network channels and provide redundant links. The PortFast function greatly shortens the convergence time of spanning tree protocol standards which ranges from 30 to 50 seconds. BPDU guard function avoids loops in spanning tree protocols.

Multi-Service Support

• With more and more services on the network, bandwidth assurance becomes more and more important. To avoid non-existent services from emerging service bandwidth, RG-S2600G-I adopts a complete QoS mechanism to use multiple services.
• Supports 802.1P QoS policy, DSCP, IP TOS, and stream filtering on Layers 2 through 7 and provides traffic classification and flow control for MAC, IP, and application streams. The switch also supports flow policies based on bandwidth control and forwarding priority which allows the network to provide different quality of service for different applications as needed.
• Supports IPv6 based QoS assurance. The switch can identify various applications in an IPv6 environment and provide different quality of service to ensure the main service bandwidth.
• Each port supports queuing out of eight priority. This allows network administrators to allocate bandwidth to applications in a good manner and ensures better service deployment. The switch supports the SP, WRR, and DRR mechanisms for determining the packet handling sequence. For example, SP ensures the transmission of preferred services in a particular queue whereas WRR provides equal opportunity for services across all queues.
• Support the flexible bandwidth control based on the combinations of switch ports, MAC addresses, IP addresses, VLAN IDs, protocols, and applications. The rate restriction granularity reaches 64 kbps. Based on network security requirements, you can set the bandwidth for different service applications as required.

Convenient and Easy Utilization and Management

• Adopting flexible RJ-45 Gigabit interface and Gigabit fiber port. You can select the connection method based on the network architecture.
• Supports a wide array of devices. Stacking enables unified management and utilization of devices, reduces management costs, and meanwhile, supports flexible combinations and port extensions to seamlessly expand capacity. In this way, the network is very flexible and scalable and network management becomes simpler.
• Supports synchronous monitoring on multiple ports. You can use a single port to monitor data flow from multiple ports simultaneously. You can also hog the incoming, outgoing, or frames in either direction to increase maintenance efficiency.
• Supports both network time protocol (NTP) and simple network time protocol (SNTP) to ensure accurate timing of switches. The protocol also ensures time consistency with servers on the network, facilitating analysis and fault diagnosis of log and traffic information.
• Syslog allows unified collection, maintenance, analysis, fault location, and backup of various log information and makes it easy for network administrators to maintain and manage networks.

Eco-Friendly Conservation Design

• S2628G-I, S2652G-I switches adopt fan-free and noise-free design which largely reduces power consumption and noise.